A fuzzy measurement method for network equipment information security assessment

Abstract

The invention provides a fuzzy measurement method for network equipment information security evaluation, and belongs to the technical field of network space security. The fuzzy measurement method comprises the steps of firstly setting index weights, building a fuzzy judgment matrix for the pairwise index relative importance degree of a sub-index set of a certain index, calculating maximum and minimum possible values and an average value for each element in the fuzzy judgment matrix according to evaluation data of known institutions, representing each element into a triangular fuzzy number by using the three values, then calculating the weight of each de-fuzzy sub-index, performing weight resetting on sub-indexes with the calculated weight being 0, and then performing normalization to acquire a final weight of each sub-index; and then performing cross-testing on network equipment, acquiring a test data result, providing comments by an expert, and performing judgment on the security of the network equipment according to the acquired sub-index weights and the comments. The fuzzy measurement method realizes judgment for the security of the network equipment, and the judgment result is more objective and more accurate.

Description

technical field [0001] The invention belongs to the technical field of network space security, and in particular relates to an evaluation of network equipment information security by using a fuzzy measurement method. Background technique [0002] At present, the Internet is developing faster and faster, which brings convenience. At the same time, there are more and more network attacks, such as DDoS (Distributed Denial of Service) attacks, ARP (Address Resolution Protocol) attacks, script attacks, sniffing and scanning, etc., resulting in Problems such as information leakage have caused people to suffer huge economic losses. The loopholes and vulnerable links in the network make the network security problem more and more serious. [0003] With the increasing scale of the Internet, a large number of network devices, such as routers, switches, servers, etc. are required. These network devices constitute the network nodes of the Internet, and perform a large amount of data st...

AI Technical Summary

Problems solved by technology

[0006] Aiming at the current problem of inaccurate assessment results, the present invention provides a fuzzy measurement method for information security assessment of network equipment, based on the data and indicators for network equipment provided by a certification agency, combined with the characteristics of network equipment itself, in the establishment On the basis of a complete index system, from the perspective of ambiguity in the evaluation, use the information obtained in the evaluation to design weights and comprehensive indicators to judge the security of network equipment

Images